CVE-2025-2045

PoC —

CVSS 3.1

4.3 medium

EPSS

<1%p20

Published

Mar 6, 2025 (Mar 6, 2025)

Modified

Jun 17, 2026

Description

Improper authorization in GitLab EE affecting all versions from 17.7 prior to 17.7.6, 17.8 prior to 17.8.4, 17.9 prior to 17.9.1 allow users with limited permissions to access to potentially sensitive project analytics data.

Vendors: gitlab
Products: gitlab
Weakness: CWE-863
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.3%)

In the news0 stories

No ingested article mentions this CVE yet.